@mongodb-js/mcp-http-runners 3.0.0-prerelease.1 → 3.0.0-prerelease.3

package/LICENSE

@@ -0,0 +1,202 @@
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/dist/index.d.ts

@@ -1,6 +1,8 @@
 export type { StreamableHttpRunnerOptions } from "./streamableHttpRunner.js";
 export { StreamableHttpRunner } from "./streamableHttpRunner.js";
 export { MCPHttpServer, type MCPHttpServerOptions } from "./mcpHttpServer.js";
+export { LegacyMcpHttpHandler, type LegacyMcpHttpHandlerOptions, type LegacySessionOptions, } from "./legacyMcpHttpHandler.js";
+export { SessionStore, SessionLimitExceededError, SessionRejectedError, createDefaultSessionStore, type ISessionStore, type SessionStoreConstructorArgs, type CreateSessionStoreFn, } from "@mongodb-js/mcp-core";
 export { MonitoringServer, type MonitoringServerOptions } from "./monitoringServer.js";
 export { ExpressBasedHttpServer, type ExpressBasedHttpServerOptions } from "./expressBasedHttpServer.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,2BAA2B,EAAE,MAAM,2BAA2B,CAAC;AAG7E,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAGjE,OAAO,EAAE,aAAa,EAAE,KAAK,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC9E,OAAO,EAAE,gBAAgB,EAAE,KAAK,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAGvF,OAAO,EAAE,sBAAsB,EAAE,KAAK,6BAA6B,EAAE,MAAM,6BAA6B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,2BAA2B,EAAE,MAAM,2BAA2B,CAAC;AAG7E,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAGjE,OAAO,EAAE,aAAa,EAAE,KAAK,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC9E,OAAO,EACH,oBAAoB,EACpB,KAAK,2BAA2B,EAChC,KAAK,oBAAoB,GAC5B,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EACH,YAAY,EACZ,yBAAyB,EACzB,oBAAoB,EACpB,yBAAyB,EACzB,KAAK,aAAa,EAClB,KAAK,2BAA2B,EAChC,KAAK,oBAAoB,GAC5B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,gBAAgB,EAAE,KAAK,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAGvF,OAAO,EAAE,sBAAsB,EAAE,KAAK,6BAA6B,EAAE,MAAM,6BAA6B,CAAC"}

package/dist/index.js

@@ -2,6 +2,9 @@
 export { StreamableHttpRunner } from "./streamableHttpRunner.js";
 // HTTP Servers
 export { MCPHttpServer } from "./mcpHttpServer.js";
+export { LegacyMcpHttpHandler, } from "./legacyMcpHttpHandler.js";
+// Session lifecycle primitives live in @mongodb-js/mcp-core; re-export for convenience.
+export { SessionStore, SessionLimitExceededError, SessionRejectedError, createDefaultSessionStore, } from "@mongodb-js/mcp-core";
 export { MonitoringServer } from "./monitoringServer.js";
 // Express HTTP Server base
 export { ExpressBasedHttpServer } from "./expressBasedHttpServer.js";

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA,qCAAqC;AACrC,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAEjE,eAAe;AACf,OAAO,EAAE,aAAa,EAA6B,MAAM,oBAAoB,CAAC;AAC9E,OAAO,EAAE,gBAAgB,EAAgC,MAAM,uBAAuB,CAAC;AAEvF,2BAA2B;AAC3B,OAAO,EAAE,sBAAsB,EAAsC,MAAM,6BAA6B,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA,qCAAqC;AACrC,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAEjE,eAAe;AACf,OAAO,EAAE,aAAa,EAA6B,MAAM,oBAAoB,CAAC;AAC9E,OAAO,EACH,oBAAoB,GAGvB,MAAM,2BAA2B,CAAC;AACnC,wFAAwF;AACxF,OAAO,EACH,YAAY,EACZ,yBAAyB,EACzB,oBAAoB,EACpB,yBAAyB,GAI5B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,gBAAgB,EAAgC,MAAM,uBAAuB,CAAC;AAEvF,2BAA2B;AAC3B,OAAO,EAAE,sBAAsB,EAAsC,MAAM,6BAA6B,CAAC"}

package/dist/legacyMcpHttpHandler.d.ts

@@ -0,0 +1,88 @@
+import { NodeStreamableHTTPServerTransport } from "@modelcontextprotocol/node";
+import type express from "express";
+import type { ILogger, TransportRequestContext, HttpServerOptions, BaseServer } from "@mongodb-js/mcp-types";
+import { type ISessionStore } from "@mongodb-js/mcp-core";
+/** Builds a fresh request-scoped server for a legacy request. */
+export type LegacyServerFactory = (request: TransportRequestContext) => Promise<BaseServer>;
+/** Tunables forwarded to the {@link SessionStore}. */
+export type LegacySessionOptions = {
+    maxSessions?: number;
+    idleTimeoutMS?: number;
+    notificationTimeoutMS?: number;
+    evictionIdleGraceMS?: number;
+};
+export type LegacyMcpHttpHandlerOptions = {
+    /** Builds a fresh request-scoped server for the legacy session. */
+    createServer: LegacyServerFactory;
+    logger: ILogger;
+    http: HttpServerOptions;
+    /** Session store backing the legacy sessionful path (auth-aware or durable). */
+    sessionStore: ISessionStore<NodeStreamableHTTPServerTransport>;
+};
+/**
+ * The contract {@link MCPHttpServer.createLegacyHandler} returns for 2025-era
+ * serving. It is deliberately transport-shaped so alternative implementations
+ * (a different transport, a distributed session store, ...) can be returned by
+ * overriding `createLegacyHandler`.
+ */
+export interface LegacyMcpHandler {
+    /** Serves one 2025-era HTTP request (POST/GET/DELETE) to `/mcp`. */
+    handle(req: express.Request, res: express.Response): Promise<void>;
+    /** Releases any held resources (e.g. live sessions) on shutdown. */
+    close(): Promise<void>;
+}
+/**
+ * Serves 2025-era (legacy) MCP requests over streamable HTTP **sessionfully**.
+ *
+ * The 2026-07-28 protocol is stateless and carries client identity per request
+ * in the `_meta` envelope. The 2025 protocol is not: it declares the client's
+ * negotiated capabilities (incl. `elicitation`) in the `initialize` handshake
+ * and delivers elicitation as real server→client requests. Both need a live,
+ * correlated transport, which is exactly what the SDK's legacy elicitation
+ * shim relies on. The SDK's `legacy: 'stateless'` mode cannot do that (each
+ * request gets a fresh instance: no capabilities, no return channel).
+ *
+ * This handler owns that sessionful lifecycle: an `initialize` POST creates a
+ * session (a connected transport/server pair), later requests and the SSE idle
+ * stream reuse the session's transport (the shim's return channel), and a
+ * DELETE closes it. Sessions are bounded by the injected `sessionStore`.
+ * Keeping it isolated from {@link MCPHttpServer} leaves the modern stateless
+ * path clean.
+ */
+export declare class LegacyMcpHttpHandler implements LegacyMcpHandler {
+    private readonly createServer;
+    private readonly logger;
+    private readonly http;
+    private readonly sessions;
+    constructor({ createServer, logger, http, sessionStore }: LegacyMcpHttpHandlerOptions);
+    /** Closes every live session (e.g. on server shutdown). */
+    close(): Promise<void>;
+    private buildTransportContext;
+    /** Reports a session error the way main did: same codes, messages, and statuses. */
+    private reportSessionError;
+    /**
+     * Keeps the session's SSE idle stream alive through proxies and reaps dead
+     * clients: pings every 30s and closes the transport after 3 consecutive
+     * failures. Not started in JSON response mode, where connections are
+     * short-lived and pings aren't needed.
+     */
+    private startKeepAliveLoop;
+    /**
+     * Creates a fresh session: builds a request-scoped server, connects it to a
+     * sessionful streamable HTTP transport (so `initialize` negotiates and the
+     * SDK keeps the client's capabilities on the connected server), and stores
+     * the transport so later requests and the SSE idle stream reuse it (the
+     * return channel the legacy elicitation shim needs).
+     */
+    private createSession;
+    /**
+     * Serves a 2025-era request. POSTs that carry no session begin a new session
+     * (the `initialize` handshake); POSTs/GETs/DELETEs that carry a session id
+     * are routed to the stored transport, preserving the client's negotiated
+     * state and providing the SSE return channel for server→client requests.
+     */
+    handle(req: express.Request, res: express.Response): Promise<void>;
+    /** Routes a session-carrying request to its live transport; reports a session error when missing. */
+    private handleSessionRequest;
+}
+//# sourceMappingURL=legacyMcpHttpHandler.d.ts.map

package/dist/legacyMcpHttpHandler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"legacyMcpHttpHandler.d.ts","sourceRoot":"","sources":["../src/legacyMcpHttpHandler.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iCAAiC,EAAE,MAAM,4BAA4B,CAAC;AAC/E,OAAO,KAAK,OAAO,MAAM,SAAS,CAAC;AACnC,OAAO,KAAK,EACR,OAAO,EACP,uBAAuB,EAEvB,iBAAiB,EACjB,UAAU,EACb,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAA6B,KAAK,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAwBrF,iEAAiE;AACjE,MAAM,MAAM,mBAAmB,GAAG,CAAC,OAAO,EAAE,uBAAuB,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;AAE5F,sDAAsD;AACtD,MAAM,MAAM,oBAAoB,GAAG;IAC/B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAChC,CAAC;AAEF,MAAM,MAAM,2BAA2B,GAAG;IACtC,mEAAmE;IACnE,YAAY,EAAE,mBAAmB,CAAC;IAClC,MAAM,EAAE,OAAO,CAAC;IAChB,IAAI,EAAE,iBAAiB,CAAC;IACxB,gFAAgF;IAChF,YAAY,EAAE,aAAa,CAAC,iCAAiC,CAAC,CAAC;CAClE,CAAC;AAEF;;;;;GAKG;AACH,MAAM,WAAW,gBAAgB;IAC7B,oEAAoE;IACpE,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnE,oEAAoE;IACpE,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1B;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,qBAAa,oBAAqB,YAAW,gBAAgB;IACzD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAsB;IACnD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAU;IACjC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAoB;IACzC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAmD;gBAEhE,EAAE,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,2BAA2B;IAOrF,2DAA2D;IAC9C,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAInC,OAAO,CAAC,qBAAqB;IAa7B,oFAAoF;IACpF,OAAO,CAAC,kBAAkB;IAsC1B;;;;;OAKG;YACW,kBAAkB;IAgDhC;;;;;;OAMG;YACW,aAAa;IA8D3B;;;;;OAKG;IACU,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;IAkE/E,qGAAqG;YACvF,oBAAoB;CA0BrC"}

package/dist/legacyMcpHttpHandler.js

@@ -0,0 +1,294 @@
+import { isInitializeRequest } from "@modelcontextprotocol/server";
+import { NodeStreamableHTTPServerTransport } from "@modelcontextprotocol/node";
+import { LogId, getRandomUUID, requestIdAttr } from "@mongodb-js/mcp-core";
+import { SessionLimitExceededError } from "@mongodb-js/mcp-core";
+import { sleep } from "./utils.js";
+/**
+ * Session error codes as they were served to 2025-era clients on main; the
+ * shared constants were removed from mcp-core with the session surface, so
+ * the legacy path keeps its wire contract locally.
+ */
+const JSON_RPC_ERROR_CODE_SESSION_ID_REQUIRED = -32001;
+const JSON_RPC_ERROR_CODE_SESSION_ID_INVALID = -32002;
+const JSON_RPC_ERROR_CODE_SESSION_NOT_FOUND = -32003;
+const JSON_RPC_ERROR_CODE_INVALID_REQUEST = -32004;
+const JSON_RPC_ERROR_CODE_DISALLOWED_EXTERNAL_SESSION = -32005;
+const JSON_RPC_ERROR_CODE_SESSION_LIMIT_EXCEEDED = -32006;
+/**
+ * Serves 2025-era (legacy) MCP requests over streamable HTTP **sessionfully**.
+ *
+ * The 2026-07-28 protocol is stateless and carries client identity per request
+ * in the `_meta` envelope. The 2025 protocol is not: it declares the client's
+ * negotiated capabilities (incl. `elicitation`) in the `initialize` handshake
+ * and delivers elicitation as real server→client requests. Both need a live,
+ * correlated transport, which is exactly what the SDK's legacy elicitation
+ * shim relies on. The SDK's `legacy: 'stateless'` mode cannot do that (each
+ * request gets a fresh instance: no capabilities, no return channel).
+ *
+ * This handler owns that sessionful lifecycle: an `initialize` POST creates a
+ * session (a connected transport/server pair), later requests and the SSE idle
+ * stream reuse the session's transport (the shim's return channel), and a
+ * DELETE closes it. Sessions are bounded by the injected `sessionStore`.
+ * Keeping it isolated from {@link MCPHttpServer} leaves the modern stateless
+ * path clean.
+ */
+export class LegacyMcpHttpHandler {
+    constructor({ createServer, logger, http, sessionStore }) {
+        this.createServer = createServer;
+        this.logger = logger;
+        this.http = http;
+        this.sessions = sessionStore;
+    }
+    /** Closes every live session (e.g. on server shutdown). */
+    async close() {
+        await this.sessions.closeAllSessions();
+    }
+    buildTransportContext(req) {
+        return {
+            headers: req.headers,
+            query: req.query,
+            // The explicit auth state of this request. Legacy serving does not
+            // normalize authInfo itself; hosts supply it via `req.auth` when
+            // using authenticated mode.
+            authInfo: req.auth
+                ? { mode: "authenticated", state: req.auth }
+                : { mode: "unauthenticated" },
+        };
+    }
+    /** Reports a session error the way main did: same codes, messages, and statuses. */
+    reportSessionError(res, errorCode) {
+        let message;
+        let statusCode = 400;
+        switch (errorCode) {
+            case JSON_RPC_ERROR_CODE_SESSION_ID_REQUIRED:
+                message = "session id is required";
+                break;
+            case JSON_RPC_ERROR_CODE_SESSION_ID_INVALID:
+                message = "session id is invalid";
+                break;
+            case JSON_RPC_ERROR_CODE_INVALID_REQUEST:
+                message = "invalid request";
+                break;
+            case JSON_RPC_ERROR_CODE_SESSION_NOT_FOUND:
+                message = "session not found";
+                statusCode = 404;
+                break;
+            case JSON_RPC_ERROR_CODE_DISALLOWED_EXTERNAL_SESSION:
+                message = "cannot provide sessionId when externally managed sessions are disabled";
+                break;
+            case JSON_RPC_ERROR_CODE_SESSION_LIMIT_EXCEEDED:
+                message = "server has reached the maximum number of concurrent sessions, try again later";
+                statusCode = 503;
+                break;
+            default:
+                message = "unknown error";
+                statusCode = 500;
+        }
+        res.status(statusCode).json({
+            jsonrpc: "2.0",
+            error: {
+                code: errorCode,
+                message,
+            },
+        });
+    }
+    /**
+     * Keeps the session's SSE idle stream alive through proxies and reaps dead
+     * clients: pings every 30s and closes the transport after 3 consecutive
+     * failures. Not started in JSON response mode, where connections are
+     * short-lived and pings aren't needed.
+     */
+    async startKeepAliveLoop({ transport, signal, }) {
+        if (this.http.responseType === "json") {
+            return;
+        }
+        let failedPings = 0;
+        while (!signal.aborted) {
+            try {
+                this.logger.debug({
+                    id: LogId.streamableHttpTransportKeepAlive,
+                    context: "streamableHttpTransport",
+                    message: "Sending ping",
+                });
+                await transport.send({
+                    jsonrpc: "2.0",
+                    method: "ping",
+                });
+                failedPings = 0;
+            }
+            catch (err) {
+                try {
+                    failedPings++;
+                    this.logger.warning({
+                        id: LogId.streamableHttpTransportKeepAliveFailure,
+                        context: "streamableHttpTransport",
+                        message: `Error sending ping (attempt #${failedPings}): ${err instanceof Error ? err.message : String(err)}`,
+                    });
+                    if (failedPings > 3) {
+                        await transport.close();
+                        return;
+                    }
+                }
+                catch {
+                    // Ignore the error of the transport close
+                }
+            }
+            await sleep(30000, { signal });
+        }
+    }
+    /**
+     * Creates a fresh session: builds a request-scoped server, connects it to a
+     * sessionful streamable HTTP transport (so `initialize` negotiates and the
+     * SDK keeps the client's capabilities on the connected server), and stores
+     * the transport so later requests and the SSE idle stream reuse it (the
+     * return channel the legacy elicitation shim needs).
+     */
+    async createSession(req) {
+        const sessionId = getRandomUUID();
+        const transport = new NodeStreamableHTTPServerTransport({
+            sessionIdGenerator: () => sessionId,
+            enableJsonResponse: this.http.responseType === "json",
+        });
+        const server = (await this.createServer(this.buildTransportContext(req)));
+        // Admit (check cap, evict LRU idle victim). A rejection admits nothing.
+        try {
+            await this.sessions.addSession({ sessionId, transport, logger: this.logger, headers: req.headers });
+        }
+        catch (error) {
+            // Dispose the un-connected server we built for a rejected session.
+            await server.close().catch(() => undefined);
+            throw error;
+        }
+        const keepAliveController = new AbortController();
+        void this.startKeepAliveLoop({ transport, signal: keepAliveController.signal });
+        // When the transport closes (client disconnect or store-initiated
+        // eviction/timeout), tear down the server and remove the session.
+        transport.onclose = () => {
+            keepAliveController.abort();
+            void server
+                .close()
+                .catch((error) => {
+                this.logger.error({
+                    id: LogId.streamableHttpTransportCloseFailure,
+                    context: "streamableHttpTransport",
+                    message: `Error closing legacy session ${sessionId}: ${error instanceof Error ? error.message : String(error)}`,
+                });
+            })
+                .finally(() => {
+                // The store removes the session before it closes the
+                // transport, so on store-initiated closes (eviction, idle
+                // timeout) the session is already gone — nothing to do.
+                if (!this.sessions.hasSession(sessionId)) {
+                    return;
+                }
+                this.sessions.closeSession({ sessionId, reason: "transport_closed" }).catch((error) => {
+                    this.logger.error({
+                        id: LogId.streamableHttpTransportCloseFailure,
+                        context: "streamableHttpTransport",
+                        message: `Error removing legacy session ${sessionId}: ${error instanceof Error ? error.message : String(error)}`,
+                    });
+                });
+            });
+        };
+        try {
+            await server.connect(transport);
+        }
+        catch (error) {
+            // Don't leave a never-connected session registered; closing the
+            // transport triggers the onclose teardown above.
+            await this.sessions.closeSession({ sessionId, reason: "unknown" }).catch(() => undefined);
+            await server.close().catch(() => undefined);
+            throw error;
+        }
+        return transport;
+    }
+    /**
+     * Serves a 2025-era request. POSTs that carry no session begin a new session
+     * (the `initialize` handshake); POSTs/GETs/DELETEs that carry a session id
+     * are routed to the stored transport, preserving the client's negotiated
+     * state and providing the SSE return channel for server→client requests.
+     */
+    async handle(req, res) {
+        const sessionId = req.headers["mcp-session-id"];
+        if (req.method === "GET") {
+            // The SSE idle stream only exists in SSE response mode.
+            if (this.http.responseType === "json") {
+                res.status(405).set("Allow", ["POST", "DELETE"]).send("Method Not Allowed");
+                return;
+            }
+            await this.handleSessionRequest(req, res, sessionId);
+            return;
+        }
+        if (req.method === "DELETE") {
+            await this.handleSessionRequest(req, res, sessionId);
+            return;
+        }
+        // POST /mcp.
+        if (sessionId && typeof sessionId !== "string") {
+            this.reportSessionError(res, JSON_RPC_ERROR_CODE_SESSION_ID_INVALID);
+            return;
+        }
+        if (isInitializeRequest(req.body)) {
+            if (sessionId) {
+                // This shim has no externally managed sessions; a client-provided
+                // session id on initialize is rejected as on main.
+                this.logger.debug({
+                    id: LogId.streamableHttpTransportDisallowedExternalSessionError,
+                    context: "streamableHttpTransport",
+                    message: `Client provided session ID ${sessionId} on initialize, but externally managed sessions are not supported`,
+                    attributes: { ...requestIdAttr(req.headers) },
+                });
+                this.reportSessionError(res, JSON_RPC_ERROR_CODE_DISALLOWED_EXTERNAL_SESSION);
+                return;
+            }
+            let transport;
+            try {
+                transport = await this.createSession(req);
+            }
+            catch (error) {
+                if (error instanceof SessionLimitExceededError) {
+                    this.logger.warning({
+                        id: LogId.streamableHttpTransportRequestFailure,
+                        context: "streamableHttpTransport",
+                        message: `Rejecting legacy session startup: ${error.message}`,
+                        attributes: { ...requestIdAttr(req.headers) },
+                    });
+                    this.reportSessionError(res, JSON_RPC_ERROR_CODE_SESSION_LIMIT_EXCEEDED);
+                    return;
+                }
+                throw error;
+            }
+            await transport.handleRequest(req, res, req.body);
+            return;
+        }
+        if (!sessionId) {
+            this.reportSessionError(res, JSON_RPC_ERROR_CODE_INVALID_REQUEST);
+            return;
+        }
+        await this.handleSessionRequest(req, res, sessionId);
+    }
+    /** Routes a session-carrying request to its live transport; reports a session error when missing. */
+    async handleSessionRequest(req, res, sessionId) {
+        if (!sessionId) {
+            this.reportSessionError(res, JSON_RPC_ERROR_CODE_SESSION_ID_REQUIRED);
+            return;
+        }
+        if (typeof sessionId !== "string") {
+            this.reportSessionError(res, JSON_RPC_ERROR_CODE_SESSION_ID_INVALID);
+            return;
+        }
+        const transport = await this.sessions.getSession(sessionId, req.headers);
+        if (!transport) {
+            this.logger.debug({
+                id: LogId.streamableHttpTransportSessionNotFound,
+                context: "streamableHttpTransport",
+                message: `Session with ID ${sessionId} not found`,
+                attributes: { ...requestIdAttr(req.headers) },
+            });
+            this.reportSessionError(res, JSON_RPC_ERROR_CODE_SESSION_NOT_FOUND);
+            return;
+        }
+        await transport.handleRequest(req, res, req.body);
+    }
+}
+//# sourceMappingURL=legacyMcpHttpHandler.js.map

package/dist/legacyMcpHttpHandler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"legacyMcpHttpHandler.js","sourceRoot":"","sources":["../src/legacyMcpHttpHandler.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,EAAE,iCAAiC,EAAE,MAAM,4BAA4B,CAAC;AAS/E,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAC3E,OAAO,EAAE,yBAAyB,EAAsB,MAAM,sBAAsB,CAAC;AACrF,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAEnC;;;;GAIG;AACH,MAAM,uCAAuC,GAAG,CAAC,KAAK,CAAC;AACvD,MAAM,sCAAsC,GAAG,CAAC,KAAK,CAAC;AACtD,MAAM,qCAAqC,GAAG,CAAC,KAAK,CAAC;AACrD,MAAM,mCAAmC,GAAG,CAAC,KAAK,CAAC;AACnD,MAAM,+CAA+C,GAAG,CAAC,KAAK,CAAC;AAC/D,MAAM,0CAA0C,GAAG,CAAC,KAAK,CAAC;AA4C1D;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,OAAO,oBAAoB;IAM7B,YAAY,EAAE,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAA+B;QACjF,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;QACjC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,QAAQ,GAAG,YAAY,CAAC;IACjC,CAAC;IAED,2DAA2D;IACpD,KAAK,CAAC,KAAK;QACd,MAAM,IAAI,CAAC,QAAQ,CAAC,gBAAgB,EAAE,CAAC;IAC3C,CAAC;IAEO,qBAAqB,CAAC,GAAoB;QAC9C,OAAO;YACH,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,KAAK,EAAE,GAAG,CAAC,KAAsD;YACjE,mEAAmE;YACnE,iEAAiE;YACjE,4BAA4B;YAC5B,QAAQ,EAAG,GAAoD,CAAC,IAAI;gBAChE,CAAC,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAG,GAAmD,CAAC,IAAI,EAAE;gBAC7F,CAAC,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE;SACpC,CAAC;IACN,CAAC;IAED,oFAAoF;IAC5E,kBAAkB,CAAC,GAAqB,EAAE,SAAiB;QAC/D,IAAI,OAAe,CAAC;QACpB,IAAI,UAAU,GAAG,GAAG,CAAC;QAErB,QAAQ,SAAS,EAAE,CAAC;YAChB,KAAK,uCAAuC;gBACxC,OAAO,GAAG,wBAAwB,CAAC;gBACnC,MAAM;YACV,KAAK,sCAAsC;gBACvC,OAAO,GAAG,uBAAuB,CAAC;gBAClC,MAAM;YACV,KAAK,mCAAmC;gBACpC,OAAO,GAAG,iBAAiB,CAAC;gBAC5B,MAAM;YACV,KAAK,qCAAqC;gBACtC,OAAO,GAAG,mBAAmB,CAAC;gBAC9B,UAAU,GAAG,GAAG,CAAC;gBACjB,MAAM;YACV,KAAK,+CAA+C;gBAChD,OAAO,GAAG,wEAAwE,CAAC;gBACnF,MAAM;YACV,KAAK,0CAA0C;gBAC3C,OAAO,GAAG,+EAA+E,CAAC;gBAC1F,UAAU,GAAG,GAAG,CAAC;gBACjB,MAAM;YACV;gBACI,OAAO,GAAG,eAAe,CAAC;gBAC1B,UAAU,GAAG,GAAG,CAAC;QACzB,CAAC;QACD,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC;YACxB,OAAO,EAAE,KAAK;YACd,KAAK,EAAE;gBACH,IAAI,EAAE,SAAS;gBACf,OAAO;aACV;SACJ,CAAC,CAAC;IACP,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,kBAAkB,CAAC,EAC7B,SAAS,EACT,MAAM,GAIT;QACG,IAAI,IAAI,CAAC,IAAI,CAAC,YAAY,KAAK,MAAM,EAAE,CAAC;YACpC,OAAO;QACX,CAAC;QAED,IAAI,WAAW,GAAG,CAAC,CAAC;QAEpB,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACrB,IAAI,CAAC;gBACD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;oBACd,EAAE,EAAE,KAAK,CAAC,gCAAgC;oBAC1C,OAAO,EAAE,yBAAyB;oBAClC,OAAO,EAAE,cAAc;iBAC1B,CAAC,CAAC;gBAEH,MAAM,SAAS,CAAC,IAAI,CAAC;oBACjB,OAAO,EAAE,KAAK;oBACd,MAAM,EAAE,MAAM;iBACjB,CAAC,CAAC;gBACH,WAAW,GAAG,CAAC,CAAC;YACpB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACX,IAAI,CAAC;oBACD,WAAW,EAAE,CAAC;oBACd,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;wBAChB,EAAE,EAAE,KAAK,CAAC,uCAAuC;wBACjD,OAAO,EAAE,yBAAyB;wBAClC,OAAO,EAAE,gCAAgC,WAAW,MAAM,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;qBAC/G,CAAC,CAAC;oBAEH,IAAI,WAAW,GAAG,CAAC,EAAE,CAAC;wBAClB,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC;wBACxB,OAAO;oBACX,CAAC;gBACL,CAAC;gBAAC,MAAM,CAAC;oBACL,0CAA0C;gBAC9C,CAAC;YACL,CAAC;YAED,MAAM,KAAK,CAAC,KAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QACpC,CAAC;IACL,CAAC;IAED;;;;;;OAMG;IACK,KAAK,CAAC,aAAa,CAAC,GAAoB;QAC5C,MAAM,SAAS,GAAG,aAAa,EAAE,CAAC;QAClC,MAAM,SAAS,GAAG,IAAI,iCAAiC,CAAC;YACpD,kBAAkB,EAAE,GAAW,EAAE,CAAC,SAAS;YAC3C,kBAAkB,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY,KAAK,MAAM;SACxD,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC,CAAgC,CAAC;QAEzG,wEAAwE;QACxE,IAAI,CAAC;YACD,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACxG,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,mEAAmE;YACnE,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC5C,MAAM,KAAK,CAAC;QAChB,CAAC;QAED,MAAM,mBAAmB,GAAG,IAAI,eAAe,EAAE,CAAC;QAClD,KAAK,IAAI,CAAC,kBAAkB,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,mBAAmB,CAAC,MAAM,EAAE,CAAC,CAAC;QAChF,kEAAkE;QAClE,kEAAkE;QAClE,SAAS,CAAC,OAAO,GAAG,GAAS,EAAE;YAC3B,mBAAmB,CAAC,KAAK,EAAE,CAAC;YAC5B,KAAK,MAAM;iBACN,KAAK,EAAE;iBACP,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;gBACtB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;oBACd,EAAE,EAAE,KAAK,CAAC,mCAAmC;oBAC7C,OAAO,EAAE,yBAAyB;oBAClC,OAAO,EAAE,gCAAgC,SAAS,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;iBAClH,CAAC,CAAC;YACP,CAAC,CAAC;iBACD,OAAO,CAAC,GAAG,EAAE;gBACV,qDAAqD;gBACrD,0DAA0D;gBAC1D,wDAAwD;gBACxD,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;oBACvC,OAAO;gBACX,CAAC;gBACD,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;oBAC3F,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;wBACd,EAAE,EAAE,KAAK,CAAC,mCAAmC;wBAC7C,OAAO,EAAE,yBAAyB;wBAClC,OAAO,EAAE,iCAAiC,SAAS,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;qBACnH,CAAC,CAAC;gBACP,CAAC,CAAC,CAAC;YACP,CAAC,CAAC,CAAC;QACX,CAAC,CAAC;QAEF,IAAI,CAAC;YACD,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACpC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,gEAAgE;YAChE,iDAAiD;YACjD,MAAM,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC1F,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC5C,MAAM,KAAK,CAAC;QAChB,CAAC;QAED,OAAO,SAAS,CAAC;IACrB,CAAC;IAED;;;;;OAKG;IACI,KAAK,CAAC,MAAM,CAAC,GAAoB,EAAE,GAAqB;QAC3D,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QAEhD,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YACvB,wDAAwD;YACxD,IAAI,IAAI,CAAC,IAAI,CAAC,YAAY,KAAK,MAAM,EAAE,CAAC;gBACpC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;gBAC5E,OAAO;YACX,CAAC;YACD,MAAM,IAAI,CAAC,oBAAoB,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC;YACrD,OAAO;QACX,CAAC;QAED,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC1B,MAAM,IAAI,CAAC,oBAAoB,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC;YACrD,OAAO;QACX,CAAC;QAED,aAAa;QACb,IAAI,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;YAC7C,IAAI,CAAC,kBAAkB,CAAC,GAAG,EAAE,sCAAsC,CAAC,CAAC;YACrE,OAAO;QACX,CAAC;QAED,IAAI,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAChC,IAAI,SAAS,EAAE,CAAC;gBACZ,kEAAkE;gBAClE,mDAAmD;gBACnD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;oBACd,EAAE,EAAE,KAAK,CAAC,qDAAqD;oBAC/D,OAAO,EAAE,yBAAyB;oBAClC,OAAO,EAAE,8BAA8B,SAAS,mEAAmE;oBACnH,UAAU,EAAE,EAAE,GAAG,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE;iBAChD,CAAC,CAAC;gBACH,IAAI,CAAC,kBAAkB,CAAC,GAAG,EAAE,+CAA+C,CAAC,CAAC;gBAC9E,OAAO;YACX,CAAC;YAED,IAAI,SAA4C,CAAC;YACjD,IAAI,CAAC;gBACD,SAAS,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;YAC9C,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACb,IAAI,KAAK,YAAY,yBAAyB,EAAE,CAAC;oBAC7C,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;wBAChB,EAAE,EAAE,KAAK,CAAC,qCAAqC;wBAC/C,OAAO,EAAE,yBAAyB;wBAClC,OAAO,EAAE,qCAAqC,KAAK,CAAC,OAAO,EAAE;wBAC7D,UAAU,EAAE,EAAE,GAAG,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE;qBAChD,CAAC,CAAC;oBACH,IAAI,CAAC,kBAAkB,CAAC,GAAG,EAAE,0CAA0C,CAAC,CAAC;oBACzE,OAAO;gBACX,CAAC;gBACD,MAAM,KAAK,CAAC;YAChB,CAAC;YACD,MAAM,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;YAClD,OAAO;QACX,CAAC;QAED,IAAI,CAAC,SAAS,EAAE,CAAC;YACb,IAAI,CAAC,kBAAkB,CAAC,GAAG,EAAE,mCAAmC,CAAC,CAAC;YAClE,OAAO;QACX,CAAC;QAED,MAAM,IAAI,CAAC,oBAAoB,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC;IACzD,CAAC;IAED,qGAAqG;IAC7F,KAAK,CAAC,oBAAoB,CAC9B,GAAoB,EACpB,GAAqB,EACrB,SAAwC;QAExC,IAAI,CAAC,SAAS,EAAE,CAAC;YACb,IAAI,CAAC,kBAAkB,CAAC,GAAG,EAAE,uCAAuC,CAAC,CAAC;YACtE,OAAO;QACX,CAAC;QACD,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;YAChC,IAAI,CAAC,kBAAkB,CAAC,GAAG,EAAE,sCAAsC,CAAC,CAAC;YACrE,OAAO;QACX,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,SAAS,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;QACzE,IAAI,CAAC,SAAS,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;gBACd,EAAE,EAAE,KAAK,CAAC,sCAAsC;gBAChD,OAAO,EAAE,yBAAyB;gBAClC,OAAO,EAAE,mBAAmB,SAAS,YAAY;gBACjD,UAAU,EAAE,EAAE,GAAG,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE;aAChD,CAAC,CAAC;YACH,IAAI,CAAC,kBAAkB,CAAC,GAAG,EAAE,qCAAqC,CAAC,CAAC;YACpE,OAAO;QACX,CAAC;QACD,MAAM,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;IACtD,CAAC;CACJ"}